bugs.php.net
http://bugs.php.net/38915 CVE-2003-1307
Apache 2.0.4x mod_php - File Descriptor Leakage (1)
Record summary
CVE-2003-1307 has a selected CVSS score of 4.3; EIP currently links 2 catalogued exploits.
Description
The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBApache 2.0.4x mod_php - File Descriptor Leakage (1)ExploitDB exploitby Steve GrubbNot analyzed1 file
ExploitDBApache 2.0.4x mod_php - File Descriptor Leakage (2)ExploitDB exploitby frauk\x41serNot analyzed1 file
References
7hackerdom.ru
http://hackerdom.ru/~dimmo/phpexpl.c 20031226 Hijacking Apache https by mod_phpmailing list
http://www.securityfocus.com/archive/1/348368 20061019 PHP "exec", "system", "popen" problemmailing list
http://www.securityfocus.com/archive/1/449234/100/0/threaded 20061020 Re: PHP "exec", "system", "popen" (+small POC)mailing list
http://www.securityfocus.com/archive/1/449298/100/0/threaded 9302vdb entry
http://www.securityfocus.com/bid/9302 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1307